Treadstone 71 developed a maturity model to help organizations determine the maturity of their cyber intelligence initiatives against the cyber intelligence common body of knowledge (CICBOK). The model provides strategic and operational aspects of your cyber intelligence maturity, where it needs to go, and where you should concentrate your attention to create more value for your business. 8 years in the making, the Treadstone 71 Cyber Intelligence Maturity Model uses traditional tradecraft as delivered by Sherman Heuer, intelligence community standards, analytic standards, and experiential knowledge derived from years of training, assessing, and building cyber intelligence programs.
Intelligence lifecycle not used. No awareness of intelligence community functions and organization.
Intelligence classification markings not in place.
Limited use of the intelligence lifecycle and classification markings. Some awareness of intelligence community functions and organization.
Intelligence lifecycle deployed and regularly used. Classification markings applied to most documents.
Intelligence community functions, organization, roles and responsibilities defined.
Intelligence lifecycle documented deployed and integrated with standard processes. Classification markings applied to all documents. Intelligence community functions, organization, roles and responsibilities integrated into annual funding, HR, and organizational priorities.
Intelligence lifecycle documented, deployed and integrated with standard processes, and measured for performance improvements and innovation - used as a KPR. Classification markings applied to all documents. Intelligence community functions, organization, roles and responsibilities integrated into annual funding, HR, and organizational priorities, integrated with other organizational intelligence functions (business, marketing, competitive).
There is a time when spend is no longer worth the maturity gains. Treadstone 71 ensures you do not go beyond this level while sustaining a solid ‘3’. As you approach an overall average of three, it is time to drop the maturity effort and move to cycle time reduction, improvements in execution, and more efforts to estimate and forecast for prevention. The Figure on the next page defines that model.